src/Controller/SecurityController.php line 20

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use App\Entity\Usuario;
  6. use App\Security\LoginAuthenticator;
  7. use App\Service\Microsoft;
  8. use Doctrine\ORM\EntityManagerInterface;
  9. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  10. use Symfony\Component\HttpFoundation\Request;
  11. use Symfony\Component\HttpFoundation\Response;
  12. use Symfony\Component\Routing\Annotation\Route;
  13. use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
  14. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  15. use Symfony\Component\Security\Http\Authentication\UserAuthenticatorInterface;
  17. class SecurityController extends AbstractController
  18. {
  19.     #[Route('/login', name: 'app_login')]
  20.     public function login(AuthenticationUtils $authenticationUtils): Response
  21.     {
  22.         // if ($this->getUser()) {
  23.         //     return $this->redirectToRoute('target_path');
  24.         // }
  26.         $tenant = "conalepmexedu.onmicrosoft.com";
  27.         $client_id = "211ac272-40bc-4a7d-b0f9-222d60baf6c0";
  28.         $response_type = "token+id_token";
  29.         $redirect_uri = "https%3A%2F%2Fti.conalepmex.edu.mx%2Fsigmec%2FprocessLogin";
  30.         $response_mode = "form_post";
  31.         $scope = "user.read+openid+profile+email";
  32.         $state = "12345";
  33.         $nonce = "678910";
  35.         $link = "https://login.microsoftonline.com/$tenant/oauth2/v2.0/authorize?client_id=$client_id&response_type=$response_type&redirect_uri=$redirect_uri&response_mode=$response_mode&scope=$scope&state=$state&nonce=$nonce";
  37.         // get the login error if there is one
  38.         $error = $authenticationUtils->getLastAuthenticationError();
  39.         // last username entered by the user
  40.         $lastUsername = $authenticationUtils->getLastUsername();
  42.         return $this->render('security/login.html.twig', ['last_username' => $lastUsername, 'error' => $error, 'link' => $link]);
  43.     }
  45.     #[Route('/logout', name: 'app_logout')]
  46.     public function logout(): void
  47.     {
  48.         throw new \LogicException('This method can be blank - it will be intercepted by the logout key on your firewall.');
  49.     }
  51.     #[Route('/processLogin', name: 'app_microsoft', methods: ['POST'])]
  52.     public function loginMicrosoft(Request $request, Microsoft $ms, EntityManagerInterface $em, UserAuthenticatorInterface $userAuthenticator, LoginAuthenticator $authenticator): Response
  53.     {
  54.         $token = $request->request->get('access_token');
  55.         if (empty($token))
  56.             throw new CustomUserMessageAuthenticationException('Username could not be found.');
  58.         $info = $ms->OIDCUserInfo($token);
  59.         $user = $em->getRepository(Usuario::class)->findOneBy(['correo' => $info['email']]);
  61.         if (!$user) {
  62.             $this->addFlash('danger', 'Usuario no encontrado. Solicitar acceso al sistema.');
  63.             throw new CustomUserMessageAuthenticationException('Username could not be found.');
  64.         }
  65.         if ($user->getEstatus() == "Pendiente") {
  66.             $this->addFlash('danger', 'La solicitud de acceso no ha sido evaluada.');
  67.             throw new CustomUserMessageAuthenticationException('Access request pending evaluation.');
  68.         }
  69.         if ($user->getEstatus() == "Rechazado") {
  70.             $this->addFlash('danger', 'La solicitud de acceso fue rechazada.');
  71.             throw new CustomUserMessageAuthenticationException('Access request has been rejected.');
  72.         }
  73.         if ($user->getEstatus() == "Suspendido") {
  74.             $this->addFlash('danger', 'Las credenciales de acceso han sido suspendidas.');
  75.             throw new CustomUserMessageAuthenticationException('Access credentials suspended.');
  76.         }
  77.         $userAuthenticator->authenticateUser($user, $authenticator, $request);
  78.         return $this->redirectToRoute('homepage');
  79.     }
  80. }